Privacy Policy – www39 Betting & Casino Platform Pakistan

1Who We Are

www39 operates the online betting and live casino platform accessible at www39.win. This Privacy Policy applies to all personal data collected from Pakistani players who visit, register on or interact with the www39 platform — whether through the website, the mobile app or any other channel provided by www39.

For the purposes of this policy, "we", "us" and "our" refer to www39. "You" refers to any individual who accesses or uses the www39 platform. If you have questions about how your data is handled, the contact details are in Section 12.

2Data We Collect

www39 collects personal data through two main routes: information you provide directly when registering or using the platform, and information collected automatically as you interact with it.

Information you provide directly:

• Full name and date of birth
• Contact number and email address
• Account login credentials (password is stored in encrypted form only)
• Identity documents provided for age or identity verification (such as CNIC or passport)
• Payment method details used for deposits and withdrawals (JazzCash mobile number, Easypaisa account, bank account details)
• Communication records — messages sent to support via live chat or email

Information collected automatically:

• IP address and general geographic location
• Device type, operating system and browser version
• Session data — pages visited, time spent, features used
• Betting and gaming activity — bets placed, games played, win/loss records
• Cookie and tracking data (see Section 5)

3How We Use Your Data

Personal data collected by www39 is used for the following purposes:

www39 does not use your personal data for automated decision-making that produces legal effects without human review. Where automated fraud-detection tools flag an account for review, the final decision on any account action is made by a member of the www39 team.

4Payment Data

All deposits and withdrawals at www39 are processed in PKR. When you make a deposit via JazzCash, Easypaisa, Raast or bank transfer, the transaction details are transmitted over an SSL-encrypted connection. www39 does not retain your full payment credentials after a transaction is processed.

Payment processing is handled through third-party payment processors. These processors are contractually required to handle payment data securely and are not permitted to use it for any purpose beyond processing your www39 transactions.

• All payment data is transmitted over HTTPS with TLS encryption.
• Transaction records are retained for the period required for financial record-keeping and dispute resolution.
• Withdrawals are processed to the payment method associated with your account — third-party withdrawals are not permitted, which protects your funds from being redirected without your knowledge.

5Cookies and Tracking Technologies

www39 uses cookies and similar technologies to keep your session active, remember your preferences and understand how the platform is being used so we can improve it. Here is what each category does:

Essential cookies — session, authentication and security — cannot be disabled without breaking basic platform functionality. Non-essential cookies (preference and analytics) can be managed through your browser settings. Clearing cookies will log you out of your current session.

6Third-Party Data Sharing

www39 does not sell your personal data. Data may be shared with third parties only in the following specific circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and bank transfer partners receive the minimum data required to process your PKR transactions. They are contractually prohibited from using this data for any other purpose.
• Identity verification providers: Where identity documents are submitted for account verification, they are processed through a secure third-party verification service. Documents are not retained beyond the verification period.
• Fraud and security services: IP address and session data may be processed by security tools to detect unusual activity and protect your account.
• Legal obligations: www39 may disclose personal data if required to do so by applicable law, court order or where there is a reasonable belief that disclosure is necessary to prevent fraud or criminal activity.

7Data Retention

www39 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, financial and dispute-resolution obligations. The following general periods apply:

• Active account data (name, contact details, betting history): Retained for the duration of your account and for a reasonable period following account closure.
• Transaction records (deposit and withdrawal history in PKR): Retained for a minimum of five years for financial record purposes.
• Identity verification documents (CNIC, passport scans): Retained only for the period required to complete verification, after which they are deleted from our systems.
• Support communications: Retained for up to two years from the date of the last message.
• Session and analytics data: Aggregated analytics data is retained indefinitely but is not personally identifiable. Raw session logs are retained for a limited period for security purposes.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to you as an individual.

8Your Rights Over Your Data

As a www39 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact support via live chat or by emailing [email protected] with your registered account details.

• Right of access: You can request a copy of the personal data www39 holds on you.
• Right to correction: If any personal data held about you is inaccurate or incomplete, you can request that it be corrected.
• Right to deletion: You can request that your personal data be deleted, subject to www39's legal retention obligations. Data required for financial records or active dispute resolution may be retained beyond a deletion request.
• Right to restrict processing: You can ask www39 to limit how your data is used in certain circumstances — for example, while a correction request is being reviewed.
• Right to object: You can object to your data being used for specific purposes, such as analytics.

Exercising your data rights does not affect your right to continue using the www39 platform, unless the request relates to data that is essential for operating your account — for example, requesting deletion of your name and contact details would require account closure.

9Account Security and Your Responsibilities

www39 uses encryption, secure server infrastructure and automated fraud detection to protect personal data on our side. However, account security also depends on how you manage your own login credentials.

• Choose a strong, unique password for your www39 account — do not reuse passwords from other platforms.
• Do not share your password, account details or verification codes with anyone, including people claiming to be www39 staff. www39 support will never ask for your password.
• Log out of your account when using shared devices.
• If you suspect unauthorised access to your account, contact support immediately. www39 can temporarily lock an account to prevent further access while the situation is investigated.

10Children's Privacy

www39 is strictly for adults aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If an account is identified as belonging to a person under 18, it will be closed immediately and any personal data collected will be deleted in accordance with Section 7.

If you believe a minor has registered an account on www39, please notify our support team immediately. We take under-age access seriously and will act on any such notification promptly.

11Changes to This Privacy Policy

www39 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements to how we explain our practices. The date at the top of this page reflects the date of the most recent update.

Where changes are material — meaning they affect how your data is used in a way that may concern you — registered users will be notified via their account contact details before the updated policy takes effect. Your continued use of the www39 platform following notification constitutes acceptance of the revised Privacy Policy.

We recommend bookmarking this page and checking it periodically. If a change is something you are not comfortable with, you may request account closure through the support team.

12Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, you can reach the www39 support team through any of the following channels:

• Live chat: Available 24/7 from within your www39 account dashboard — the fastest route for most enquiries.
• Email: [email protected] — include your registered account details so your query can be handled promptly.
• FAQ: The FAQ page covers common questions about account data, payment security and how information is used.

For account-specific data requests — such as requesting a copy of your data or asking for account deletion — please use the email route and include your full registered name, account username and the nature of your request.